Microsoft blames European Commission for global CrowdStrike catastrophe

Posted:
in General Discussion

The worldwide outage of Windows PCs was because of European Commission demands, says Microsoft, and we should get used to it.

Blue screen with sad face emoticon and text: 'Your PC ran into a problem and needs to restart. 0% complete.'
A typical "Blue Screen of Death" as seen by millions of people worldwide after the CrowdStrike update



The outage that closed airports, shut down hospitals, and took out television stations was actually caused because of a single Windows update. Security firm CrowdStrike pushed out a flawed update, which it admits created the problem.

However, Microsoft has now told the Wall Street Journal that the reason such an update could have a calamitous, global impact, is the fault of the European Commission. Specifically, a spokesperson said that EC agreements mean that Microsoft is not legally allowed to secure its systems the way Apple does.

Reportedly, in 2009, Microsoft agreed with the EC that it would provide equal access to Windows security developers that it has for its own teams. Therefore, CrowdStrike could push out an update without Microsoft necessarily even knowing about it.

This is Microsoft washing its hands of the issue. But it's also much more than that.

For this is Microsoft effectively saying that it allegedly cannot but certainly will not do anything to prevent this from happening again.

The Wall Street Journal notes that in 2020, Apple told security developers that they would no longer have what's called kernel access for their software. Microsoft security developers still have this type of access to Windows.



Read on AppleInsider

«134

Comments

  • Reply 1 of 74
    ssfe11ssfe11 Posts: 72member
    The EC once again shows how clueless grandstanding politicians can cause havoc. The EC taking lefts and rights from Apple, Meta and now Microsoft. The only way to beat these ignorant folks is to band together and that’s what looks like is exactly happening. Nice!
    edited July 22 Cesar Battistini Mazieromike1iOS_Guy80pulseimages9secondkox2timpetusAfarstarapplemindedmagman1979dewme
  • Reply 2 of 74
    avon b7avon b7 Posts: 7,938member
    Did the EU make Microsoft do this worldwide?

    The problem last week had nothing to do with the EU. It was sloppy coding, sloppy testing and with little to no resilience built into the whole process. 
    nubus9secondkox2muthuk_vanalingamxyzzy-xxxdope_ahminemagman1979RonnyDaddybonobob
  • Reply 3 of 74
    M68000M68000 Posts: 827member
    This seems to be totally a QA testing issue.  Was any testing done? 
    muthuk_vanalingamxyzzy-xxxwilliamlondonbyronlwatto_cobra
  • Reply 4 of 74
    Is 2009 the correct date for when Microsoft agreed to this? That would mean it took 15 years for something calamitous like the Crowdstrike update to happen. 
    xyzzy-xxxbyronlkillroywatto_cobra
  • Reply 5 of 74
    Is 2009 the correct date for when Microsoft agreed to this? That would mean it took 15 years for something calamitous like the Crowdstrike update to happen. 
    We got lucky
    apple4thewinmike19secondkox2byronlkillroywatto_cobra
  • Reply 6 of 74
    PemaPema Posts: 98member
    avon b7 said:
    Did the EU make Microsoft do this worldwide?

    The problem last week had nothing to do with the EU. It was sloppy coding, sloppy testing and with little to no resilience built into the whole process. 
    Absolutely spot on. 
    This is vintage Microsoft sloppiness going over 50 years now. Releasing substandard code, causing chaos first on the desktops, then when office networks became the norm and then the enterprise and now global. 
    Why we are still saddled with the worst o/s ever written I will never understand?

    Windows is basically a graphic interface bolted on to DOS. Anyone who has ever followed the path from DOS to Windows 2000, Windows XP and now the latest incarnation Windows 11 knows that it has never been a stable O/S. The only reason that it is still pervasive is because Gates licensed it for a small fee to any PC maker. The hardware was never a concern for Microsoft. You could install DOS/Windows on your toaster if you like. So long as you pay the $25 fee per box. You are good to go. 

    Apple, ever the company to maintain quality control, would not split the two. Well, ok, there was a brief period when the Pepsi Cola moron ran Apple that the company licensed the OS to a guy in Texas I believe who agreed to a very stringent hardware contract. But that arrangement fell apart after a year. And since then Apple, after Jobs came back from Next, has grown into a $3 Trillion company, always maintaining the highest standards. 

    We have the equivalent of DOS/Windows in the phone space. It's called Android. You build any junky phone and slap Android on it and you are good to go. 

    This particular outage had to do with Windows but also with the way Windows is managed from the cloud. A single component of CrowdStrike called Falcon was not thoroughly tested and it cascaded down to every Windows install out there. 

    And it will happen again. Get rid of Windows and you solve half the problem. 
    DAalseth9secondkox2StrangeDaysxyzzy-xxxAfarstarmagman1979marklarkRonnyDaddybyronlteejay2012
  • Reply 7 of 74
    Is 2009 the correct date for when Microsoft agreed to this? That would mean it took 15 years for something calamitous like the Crowdstrike update to happen. 
    We got lucky
    And it could’ve been worse 😬
    9secondkox2magman1979killroywatto_cobra
  • Reply 8 of 74
    avon b7 said:
    Did the EU make Microsoft do this worldwide?

    The problem last week had nothing to do with the EU. It was sloppy coding, sloppy testing and with little to no resilience built into the whole process. 
    Not only did the EU not make MS do this worldwide it didn’t make them do it in the EU. MS could have locked kernel and provided APIs. The only catch would be that MS would have to use the APIs as well. Instead they opted to provide security companies kernel access. This is what Apple has done. 

    So, it’s not about the EU’s requirement for a level playing field. It’s about Microsoft's sloppy compliance. 
    nubus9secondkox2muthuk_vanalingamianbetteridgeLettucexyzzy-xxxmagman1979marklarkmacxpressspheric
  • Reply 9 of 74
    And now in the US we're letting judges and other power-hungry politicians replace tech- and science-savvy officers with themselves and their cohorts. To them, their beliefs (emotionally-induced decisions about what is true or false) are superior to factual knowledge (that which has been determined to be true or false). What could go wrong?
    9secondkox2magman1979marklarkforegoneconclusionbaconstangdewmekillroywatto_cobra
  • Reply 10 of 74
    glhglh Posts: 18member
    As I understand it, applying the update makes Windows stop working, resulting in the blue screen. This is not something hard for someone at CrowdStrike to test -- all they had to do is apply it to a test computer and reboot. Is it possible they released it without doing that?
    9secondkox2muthuk_vanalingamteaearlegreyhotmagman1979williamlondonkillroywatto_cobra
  • Reply 11 of 74
    blastdoorblastdoor Posts: 3,516member
    I agree with Microsoft.

    The irony is, we actually have a much more competitive market today than we did 25 years ago. Back in 1999, there was Wintel and not much else. Apple had about a 2% marketshare of the PC market, there was no smartphone market, almost all of the RISC guys were throwing in the towel out of fear of Intel, AMD was barely hanging on, etc etc. 

    Today, we have three major platform companies (Apple, Google, and Microsoft), not just one. We have real competition between Intel and AMD plus multiple very strong ARM-based competitors and RISC-V on the horizon. 

    This is basically a golden age of competition in computing platforms and the EC is trying to wreck it.
    9secondkox2timpetusbadmonkwilliamlondonbaconstangradarthekatIG-apple_viennawatto_cobra
  • Reply 12 of 74
    Does Crowdstrike have access to the Linux kernel? If so, has it resulted in any major issues?
    xyzzy-xxxwatto_cobra
  • Reply 13 of 74
    chadbagchadbag Posts: 2,023member
    avon b7 said:
    Did the EU make Microsoft do this worldwide?

    The problem last week had nothing to do with the EU. It was sloppy coding, sloppy testing and with little to no resilience built into the whole process. 
    And MS is expected to maintain separate versions for the EU and the rest of the world?   EU directives do affect the whole world where it’s not feasible to wall it off for a region.  And allowing security providers who have customers and deal worldwide access only in EU based PCs makes no sense.  
    9secondkox2badmonkroundaboutnowdewmewatto_cobra
  • Reply 14 of 74
    chadbagchadbag Posts: 2,023member
    Pema said:
    avon b7 said:
    Did the EU make Microsoft do this worldwide?

    The problem last week had nothing to do with the EU. It was sloppy coding, sloppy testing and with little to no resilience built into the whole process. 
    Absolutely spot on. 
    This is vintage Microsoft sloppiness going over 50 years now. Releasing substandard code, causing chaos first on the desktops, then when office networks became the norm and then the enterprise and now global. 
    Why we are still saddled with the worst o/s ever written I will never understand?

    Windows is basically a graphic interface bolted on to DOS. Anyone who has ever followed the path from DOS to Windows 2000, Windows XP and now the latest incarnation Windows 11 knows that it has never been a stable O/S. The only reason that it is still pervasive is because Gates licensed it for a small fee to any PC maker. The hardware was never a concern for Microsoft. You could install DOS/Windows on your toaster if you like. So long as you pay the $25 fee per box. You are good to go. 

    Apple, ever the company to maintain quality control, would not split the two. Well, ok, there was a brief period when the Pepsi Cola moron ran Apple that the company licensed the OS to a guy in Texas I believe who agreed to a very stringent hardware contract. But that arrangement fell apart after a year. And since then Apple, after Jobs came back from Next, has grown into a $3 Trillion company, always maintaining the highest standards. 

    We have the equivalent of DOS/Windows in the phone space. It's called Android. You build any junky phone and slap Android on it and you are good to go. 

    This particular outage had to do with Windows but also with the way Windows is managed from the cloud. A single component of CrowdStrike called Falcon was not thoroughly tested and it cascaded down to every Windows install out there. 

    And it will happen again. Get rid of Windows and you solve half the problem. 
    Tell me you did t read the article without telling me. 

    First, Windows has not been a GUI on top of DOS since NT came out.  Second, MS code was not the cause of this problem.  crowdstrike was allowed to push out an update affecting windows kernel without MS having any control.   Nothing to do with MS. 

    I’m not a MS cheerleader — I avoid MS in any form as much as possible and have no MS apps on my own computers out of principle.  (Work computers are a different situation).   But it’s not fair to MS to claim they have sloppy code that caused this.   This was crowdstrike code that MS seemingly had to allow access at kernel level without any coordination or vetting with/by MS
    9secondkox2badmonkwilliamlondonstompyglobbyctt_zhdewmeCheeseFreezekillroywatto_cobra
  • Reply 15 of 74
    avon b7 said:
    Did the EU make Microsoft do this worldwide?

    The problem last week had nothing to do with the EU. It was sloppy coding, sloppy testing and with little to no resilience built into the whole process. 

    Microsoft didn't do this at all.  It was Crowdstrike that did it.
    9secondkox2maltzbadmonkstompyglobbyctt_zhdewmerob53killroywatto_cobra
  • Reply 16 of 74
    kmareikmarei Posts: 198member
    Pema said:
    avon b7 said:
    Did the EU make Microsoft do this worldwide?

    The problem last week had nothing to do with the EU. It was sloppy coding, sloppy testing and with little to no resilience built into the whole process. 
    Absolutely spot on. 
    This is vintage Microsoft sloppiness going over 50 years now. Releasing substandard code, causing chaos first on the desktops, then when office networks became the norm and then the enterprise and now global. 
    Why we are still saddled with the worst o/s ever written I will never understand?

    Windows is basically a graphic interface bolted on to DOS. Anyone who has ever followed the path from DOS to Windows 2000, Windows XP and now the latest incarnation Windows 11 knows that it has never been a stable O/S. The only reason that it is still pervasive is because Gates licensed it for a small fee to any PC maker. The hardware was never a concern for Microsoft. You could install DOS/Windows on your toaster if you like. So long as you pay the $25 fee per box. You are good to go. 

    Apple, ever the company to maintain quality control, would not split the two. Well, ok, there was a brief period when the Pepsi Cola moron ran Apple that the company licensed the OS to a guy in Texas I believe who agreed to a very stringent hardware contract. But that arrangement fell apart after a year. And since then Apple, after Jobs came back from Next, has grown into a $3 Trillion company, always maintaining the highest standards. 

    We have the equivalent of DOS/Windows in the phone space. It's called Android. You build any junky phone and slap Android on it and you are good to go. 

    This particular outage had to do with Windows but also with the way Windows is managed from the cloud. A single component of CrowdStrike called Falcon was not thoroughly tested and it cascaded down to every Windows install out there. 

    And it will happen again. Get rid of Windows and you solve half the problem. 
    you started with your conclusion (MS s bad)
    then you made the facts fit this narrative

    only problem is, you didn't actually read the article :)
    Microsoft was not involved in this issue, it was Crowdstrike alone.
    which is why the solution came from Crowdstrike

    9secondkox2williamlondonstompyctt_zhdewmeradarthekatkillroywatto_cobra
  • Reply 17 of 74
    9secondkox29secondkox2 Posts: 2,980member
    avon b7 said:
    Did the EU make Microsoft do this worldwide?

    The problem last week had nothing to do with the EU. It was sloppy coding, sloppy testing and with little to no resilience built into the whole process. 
    If the EU didn’t FORCE Microsoft to give sloppy third parties like CloudStrike the same security and update status it gives its internal OS teams, then the “sloppy developers” would not even be able to foist this crap on the world. 

    It’s absolutely the fault of the brain-dead EU policies. Today it’s cloud strike. Tomorrow it will be anyone else. 

    And now the EU is hoping to turn Apple into the same kind of disaster by removing the guardrails Apple has invested so heavily into. 

    The EU puts Joe developer over the big companies that are responsible for ensuring critical system stay working properly and disaster ensues. It’s the exact scenario we’ve been talking about since this crap started. 

    The entire set of policies from the EU relating to American tech companies needs to be reset and left alone. The new commission candidates would be wise to trash that nonsense on the first day in office. 

    Otherwise, it will be more of this snd in faster succession. 
    timpetusbadmonkglobbybaconstangradarthekatteejay2012killroy
  • Reply 18 of 74
    9secondkox29secondkox2 Posts: 2,980member

    kmarei said:
    Pema said:
    avon b7 said:
    Did the EU make Microsoft do this worldwide?

    The problem last week had nothing to do with the EU. It was sloppy coding, sloppy testing and with little to no resilience built into the whole process. 
    Absolutely spot on. 
    This is vintage Microsoft sloppiness going over 50 years now. Releasing substandard code, causing chaos first on the desktops, then when office networks became the norm and then the enterprise and now global. 
    Why we are still saddled with the worst o/s ever written I will never understand?

    Windows is basically a graphic interface bolted on to DOS. Anyone who has ever followed the path from DOS to Windows 2000, Windows XP and now the latest incarnation Windows 11 knows that it has never been a stable O/S. The only reason that it is still pervasive is because Gates licensed it for a small fee to any PC maker. The hardware was never a concern for Microsoft. You could install DOS/Windows on your toaster if you like. So long as you pay the $25 fee per box. You are good to go. 

    Apple, ever the company to maintain quality control, would not split the two. Well, ok, there was a brief period when the Pepsi Cola moron ran Apple that the company licensed the OS to a guy in Texas I believe who agreed to a very stringent hardware contract. But that arrangement fell apart after a year. And since then Apple, after Jobs came back from Next, has grown into a $3 Trillion company, always maintaining the highest standards. 

    We have the equivalent of DOS/Windows in the phone space. It's called Android. You build any junky phone and slap Android on it and you are good to go. 

    This particular outage had to do with Windows but also with the way Windows is managed from the cloud. A single component of CrowdStrike called Falcon was not thoroughly tested and it cascaded down to every Windows install out there. 

    And it will happen again. Get rid of Windows and you solve half the problem. 
    you started with your conclusion (MS s bad)
    then you made the facts fit this narrative

    only problem is, you didn't actually read the article :)
    Microsoft was not involved in this issue, it was Crowdstrike alone.
    which is why the solution came from Crowdstrike

    Yep. The geniuses at the EU made it so cloudstrike can bypass Microsoft safeguards entirely and push their own junk directly onto Microsoft systems. 

    Nothing to do with Microsoft and everything to do with the EU giving unscrupulous developers unfettered access. 

    There should be a class action suit against the EU from all counties and corporations as well as all individuals affected. 

    While cloud strike deserves criticism, it’s not really their fault entirely. Any developer will have mistakes. But the big lawmakers, who are trying to steer the world where they want - bear responsibility for throwing the toddlers into the deep end of the pool and then doing nothing when they can’t swim. 

    Reverse these stupid policies. 


    edited July 22 hammeroftruthbadmonkglobbyradarthekatkillroywatto_cobra
  • Reply 19 of 74
    ransonranson Posts: 80member
    For the "Microsoft sucks, this is their fault and they should have never let it happen" crowd - 

    1 - Yes, Windows has historically been terribly insecure and full of bugs for 30 years.  2 - This incident was not Microsoft's fault.  3 - Both things can be true at the same time.

    CrowdStrike is a third party security solution that many companies pay for, just like others use Symantec or McAfee security solutions. Microsoft has nothing to do with CrowdStrike, just like they have nothing to do with Symantec. CrowdStrike's Falcon service (which is what failed) is not something that just comes on every Windows machine or is even sold by Microsoft. It's not something Joe User can just install on their personal home computer. A company's enterprise IT team installs Falcon via Group Policy to its fleet of Windows and Mac machines, because they pay CrowdStrike a license for it. In this case, CrowdStrike pushed out an update to their own software that was faulty for Windows machines. So, at least in this case, if you are blaming Microsoft, you need to check your ignorance.
    edited July 22 badmonkstompyglobbyctt_zhdewmeradarthekatbeowulfschmidtwatto_cobra
  • Reply 20 of 74
    y2any2an Posts: 207member
    I don’t think this is right. Apple correctly pushed antivirus software out of kernel space into user space. Microsoft has not done that. If there was a reason that Microsoft did not do this because it would put third-party antivirus providers at a competitive disadvantage compared with Microsoft, it’s because their own antivirus still runs in kernel space.
    ianbetteridgemuthuk_vanalingam9secondkox2magman1979ronndewmebaconstangjidoxyzzy01watto_cobra
Sign In or Register to comment.